Approved changes feed: RSS · Atom

cpe:2.3:a:amd:amd_epyc™_embedded_9003:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductAmd Epyc™ Embedded 9003 (22232446-59b8-5b50-afce-d9665899eab4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21980 vulnerable 2026-06-08 06:29:33.077281 Details available
HIGH (7.9)
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
Published: 2024-08-05T16:06:36.216Z
Updated: 2024-08-05T21:00:57.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21978 vulnerable 2026-06-08 06:29:32.885629 Details available
MEDIUM (6)
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.
Published: 2024-08-05T16:05:34.019Z
Updated: 2024-08-05T17:36:02.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31355 vulnerable 2026-06-08 06:04:42.959282 Details available
MEDIUM (6)
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
Published: 2024-08-05T16:04:24.813Z
Updated: 2024-08-06T14:58:40.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31315 not_vulnerable 2026-06-08 06:04:42.575083 Details available
HIGH (7.5)
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
Published: 2024-08-09T17:08:24.237Z
Updated: 2024-09-12T12:56:32.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20578 not_vulnerable 2026-06-08 05:52:45.129074 Details available
HIGH (7.5)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Published: 2024-08-13T16:52:58.457Z
Updated: 2025-03-18T20:03:43.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20566 vulnerable 2026-06-08 05:52:44.749742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46766 vulnerable 2026-06-08 05:38:05.214245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.